Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
File:                     o8cchkWd50u9NaPMv9iuXZy00tg.cer (raw, json)
Hash identifier:          9EqhVvbANsi3lVL5dt3tthBmwmtCSXkAfpBlEoONNvU=
Subject key identifier:   A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421440D8FF0BC59F3447CDD0282239A29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211080
                          IP: 185.182.158.0/24
                          IP: 2a10:ff40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:0d:8f:f0:bc:59:f3:44:7c:dd:02:82:23:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:03:a0:b7:d5:0f:e1:f2:24:e7:0f:30:e6:
                    cd:7d:a4:7f:a9:9f:f0:96:d8:b7:41:f7:aa:f9:3f:
                    5f:4c:5d:2f:bc:2e:44:d4:87:36:69:fe:ed:87:ed:
                    88:82:61:88:d5:b5:a8:92:6d:41:bf:ff:66:9d:fc:
                    f3:b1:5d:4e:c4:32:c0:7c:fa:76:60:ab:09:a6:43:
                    c0:21:d5:aa:3b:3a:38:89:79:27:f7:ea:f8:3f:20:
                    3b:4d:46:fd:09:59:8f:9d:c8:cb:6c:db:a1:a1:95:
                    c8:52:7d:96:9f:78:f4:f8:71:e9:fc:19:6b:46:09:
                    1d:2d:bb:6f:fb:f3:f6:23:1e:99:7f:ef:03:89:c9:
                    75:08:78:f9:be:f0:e5:db:2d:3a:9e:65:17:dc:45:
                    e1:fd:2a:43:17:3f:39:7d:c7:b3:34:72:b7:df:b9:
                    ad:d4:cd:88:49:8c:d1:ac:87:52:53:70:85:cf:10:
                    27:ae:02:dc:69:d1:8f:b7:ce:b1:c0:f3:7d:76:35:
                    d9:c2:a2:dd:63:db:63:94:97:ce:40:a9:8a:0d:2b:
                    7f:29:aa:f8:83:39:43:e1:34:b8:e5:d6:74:c5:60:
                    ee:45:8f:34:c5:a9:f8:02:2e:3e:00:b9:91:cf:1f:
                    0b:01:a0:d5:7b:4f:a2:f0:0d:5c:37:92:26:8f:07:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.158.0/24
                IPv6:
                  2a10:ff40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211080

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:3b:e8:22:3f:dc:ab:01:f8:fd:2d:ef:3b:70:5f:78:81:
         f2:76:77:52:6a:be:d3:c9:d7:54:54:4a:89:8e:e2:2a:3c:b1:
         47:a2:b3:22:49:0a:a6:6a:8c:d3:11:15:4d:8a:94:50:bc:ef:
         f2:a2:d7:e9:0a:97:3a:69:d7:5a:27:32:6e:1b:30:8c:07:81:
         c8:40:e5:60:1e:78:d0:99:43:fd:3d:c3:85:fb:23:e2:a4:4a:
         77:68:67:d1:ae:d1:c1:fb:3d:48:a2:16:57:75:59:c9:32:24:
         b1:30:34:4a:99:47:e9:c7:f7:95:be:84:fb:74:a0:bf:0f:99:
         a0:d8:93:a9:f6:ef:41:fc:21:66:a9:06:a2:12:f8:05:1e:b1:
         81:c4:db:94:71:2d:bc:b3:36:06:9b:ee:a6:fe:38:92:8f:7b:
         e6:c0:4a:b5:c7:1c:0b:15:b0:c8:b3:29:ff:71:d9:31:82:9c:
         e8:07:8c:52:7a:9b:d5:f3:e9:d9:8d:f5:54:d8:60:58:bd:44:
         ff:c6:8e:06:ca:83:94:12:7d:c1:60:7c:de:70:4a:8e:3a:aa:
         bf:ab:cc:91:70:89:a6:56:0b:7f:0f:d2:a6:81:5a:cb:16:49:
         13:f1:19:05:50:86:3b:a2:4b:15:6e:78:1e:b9:22:f9:13:65:
         e8:e6:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----